html處理富文本內容，避免XSS工具類

import org.apache.commons.lang3.StringEscapeUtils;
import org.jsoup.Jsoup;
import org.jsoup.safety.Whitelist;

import com.jfinal.log.Log;

/**
 * Html處理
 */
public abstract class ToolHtml {

   @SuppressWarnings("unused")
   private static final Log log = Log.getLog(ToolHtml.class);

   /**
    * 特殊字符轉義，避免XSS
    * @param content
    * @return
    */
   public static String escapehtml(String content){
      return StringEscapeUtils.escapeHtml4(content);
   }
   
   /**
    * 特殊字符轉義，避免XSS
    * @param content
    * @return
    */
   public static String unescapehtml(String content){
      return StringEscapeUtils.unescapeHtml4(content);
   }

   /**
    * 富文本內容處理返回純文本
    * @param unsafe
    * @return
    */
   public static String cleanHtml(String unsafe){
      String clear = Jsoup.clean(unsafe, Whitelist.simpleText());
      return clear;
   }

   /**
    * 富文本內容處理返回安全文本
    * @param unsafe
    * @return
    */
   public static String safeHtml(String unsafe){
      String safe = Jsoup.clean(unsafe, Whitelist.basic());
      return safe;
   }
   
}